# Ambari NiFi Configure

    module.exports = ->
      service = migration.call @, service, 'ryba/ambari/server', ['ryba', 'ambari', 'nifi'], require('nikita/lib/misc').merge require('.').use,
        ssl: key: ['ssl']
        hdf: key: ['ryba', 'hdf']
      options = @config.ryba.ambari.nifi = service.options

## Environment

      options.conf_dir ?= '/etc/nifi/conf'
      options.log_dir ?= '/var/log/nifi'
      options.toolkit ?= {}
      options.toolkit.source ?= 'http://www-eu.apache.org/dist/nifi/1.2.0/nifi-toolkit-1.2.0-bin.zip'
      options.toolkit.target ?= '/etc/nifi/conf/nifi-toolkit'

## User and Groups

      # Group
      options.group = name: options.group if typeof options.group is 'string'
      options.group ?= {}
      options.group.name ?= 'nifi'
      options.group.system ?= true
      # User
      options.user = name: options.user if typeof options.user is 'string'
      options.user ?= {}
      options.user.name ?= 'nifi'
      options.user.gid = options.group.name
      options.user.system ?= true
      options.user.comment ?= 'NiFi User'
      options.user.home ?= '/var/lib/nifi'
      options.user.limits ?= {}
      options.user.limits.nofile ?= 64000
      options.user.limits.nproc ?= 10000

## SSL

https://community.hortonworks.com/articles/81184/understanding-the-initial-admin-identity-access-po.html

      options.ssl = merge {}, service.use.ssl?[0]?.options, options.ssl
      options.ssl.enabled ?= !!service.use.ssl
      options.ssl.certs = {}
      # options.ssl.truststore ?= {}
      # options.ssl.keystore ?= {}
      if options.ssl.enabled
        # options.ssl.cert = @config.ssl.cert
        # options.ssl.key = @config.ssl.key
        # options.ssl.cacert = @config.ssl.cacert
        for srv in service.use.ssl
          options.ssl.certs[srv.node.hostname] ?= {}
          options.ssl.certs[srv.node.hostname] = srv.options.cert
        options.ssl.truststore.target = "#{options.conf_dir}/truststore.jks"
        throw Error 'Required Property: truststore.password' unless options.ssl.truststore.password
        options.ssl.truststore.caname ?= 'hadoop_root_ca'
        options.ssl.truststore.type ?= 'jks'
        throw Error "Invalid Truststore Type: #{truststore.type}" unless options.ssl.truststore.type in ['jks', 'jceks', 'pkcs12']
        options.ssl.keystore.target = "#{options.conf_dir}/keystore.jks"
        throw Error 'Required Property: keystore.password' unless options.ssl.keystore.password
        throw Error 'Required Property: keystore.keypass' unless options.ssl.keystore.keypass

## Dependencies

    {merge} = require '@nikitajs/core/lib/misc'
    migration = require 'masson/lib/migration'